Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe() When ksmbd_iov_pin_rsp() fails, we should call ksmbd_session_rpc_close().
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected f2283680a80571ca82d710bc6ecd8f8beac67d63 before a2c68e256fb7a4ac34154c6e865a1389acca839f; affected 9f297df20d93411c0b4ddad7f88ba04a7cd36e77 before 2b7b4df87fe6f2db6ee45f475de6b37b8b8e5d29; affected e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d before 04dd114b682a4ccaeba2c2bad049c8b50ce740d8; affected e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d before ac18761b530b5dd40f59af8a25902282e5512854; affected e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d before fdda836fcee6fdbcccc24e3679097efb583f581f; affected e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d before 7c28f8eef5ac5312794d8a52918076dcd787e53b; affected 5.15.145 before 5.15.200; affected 6.1.71 before 6.1.163 |
| Linux / Linux | affected 6.6; unaffected 0 before 6.6; unaffected 5.15.200 through 5.15.*; unaffected 6.1.163 through 6.1.*; unaffected 6.6.124 through 6.6.*; unaffected 6.12.70 through 6.12.*; unaffected 6.18.10 through 6.18.*; unaffected 6.19 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/a2c68e256fb7a4ac34154c6e865a1389acca839f
- https://git.kernel.org/stable/c/2b7b4df87fe6f2db6ee45f475de6b37b8b8e5d29
- https://git.kernel.org/stable/c/04dd114b682a4ccaeba2c2bad049c8b50ce740d8
- https://git.kernel.org/stable/c/ac18761b530b5dd40f59af8a25902282e5512854
- https://git.kernel.org/stable/c/fdda836fcee6fdbcccc24e3679097efb583f581f
- https://git.kernel.org/stable/c/7c28f8eef5ac5312794d8a52918076dcd787e53b